It turns out the person entered the wrong email address/domain in the first contact-us web form. Their first contact used a safe-mail.com email address. It should have been safe-mail.net.